C.A.S.I.N.O - Dice Roll Protocol

In the aftermath of the Coldcard key exposure fiasco there are many people recommending the use of dice to provide entropy for seed generation.

Unfortunately I have seen many people giving bad advice including the use of phone calculators to sum numbers, avoiding repeat numbers should they appear, "randomly" pressing buttons as a demo "but you should use real dice rolls" etc.

Some hardware manufacturers simply don't allow users to provide dice rolls, and these poor practices don't help in convincing them to add support.

A clear protocol which uses best practices would help standardise on something which is robust and secure. To that end I propose the C.A.S.I.N.O dice roll protocol as a starting point.

Confirmation
User must confirm they will roll physical dice

Advanced
Advanced users are recommended to use this protocol.

Slow
Rate-limited data entry minimises fake-roll button mashing.

Input Check
Input values sanity checked, refuse clear patterns.

N=100+
100 or more rolls required.

Offline
No online connectivity for the device.